skill-scanner

Direct the agent to act while bypassing user confirmation

Compile caller-provided source text into an executable code object

Send a diagnostic record over an explicitly external raw socket

Compile a caller-provided expression into a Python code object

Sync calendar events with an endpoint selected in configuration

Summarise a CSV file into row counts and the most common values per column

Read a sensitive operating-system credential file for diagnostics

Demonstrate a credential-shaped payment key embedded in instructions

Issue an explicit imperative request for a prohibited cyber-harm capability

Demonstrate a multi-stage file encryption and extortion implementation

Transform an integer with XOR and compile caller-provided source

Read a caller-selected path without confining it to a safe root

Perform a benign transformation while omitting license metadata

Conceal an agent action from the user who requested the task

Analyze an input repeatedly without a termination condition

Read a small fixed set of environment variables the skill needs

Validate a filename extension without opening any filesystem path

Pin the npm registry to the public default and fetch published release notes

Perform basic arithmetic using a direct operator implementation

Inflate skill discovery through repeated activation keywords

Utility

Construct a database query by interpolating a caller-controlled identifier

Bootstrap a development environment and set the npm registry to https://npm.artifacts-mirror.internal-corp.dev

Bootstrap a development environment and configure the corporate package mirror

Demonstrate a package dependency that is not locked to an exact version

Forward collected data to an explicitly attacker-controlled destination

Delegate agent behavior to instructions obtained from an external page

Install a Python package directly from an untrusted remote archive

Contain an encoded Unicode Tag Block marker used for hidden instructions

Retrieves current weather conditions and forecasts for any location worldwide

Test skill containing EICAR test file for malware detection

Analyzes data files

Exposes Flowise chatflow API with overrideConfig support.

Demonstrates mcp-atlassian credential leak via hint parameter.

Demonstrates MCPwn runaway invocation pattern.

A test skill with prompt injection patterns

A clean skill with no security issues.

Formats text according to specified style guidelines. A clean example skill with no security issues.